This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: rHOX0gENlhmJm3CQF07QA3flNkGo+itNwJBYxoLf2FE=
Subject key identifier: 4B:E0:83:BB:8E:17:0A:44:FA:D7:88:10:43:63:E5:36:4F:E4:9A:7C
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019C43FE5E8353EB327CC1B92767B672CC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0D20
Signing time: Mon 09 Feb 2026 20:01:09 +0000
Manifest this update: Mon 09 Feb 2026 20:01:09 +0000
Manifest next update: Tue 10 Feb 2026 20:01:09 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: Dtbl9dDmAn3+eMlUKXlRgL52IOGuBlCqTqzL0/6gLT4=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:5e:83:53:eb:32:7c:c1:b9:27:67:b6:72:cc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Feb 9 20:01:09 2026 GMT
Not After : Feb 10 20:01:09 2026 GMT
Subject: CN=4be083bb8e170a44fad788104363e5364fe49a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:be:c0:2b:cf:3f:a7:9e:0c:c3:6e:0e:95:
6b:e3:73:50:27:4e:2e:fd:74:34:c3:fd:18:dc:02:
9c:cd:e1:e6:59:05:1f:6e:e8:70:21:d4:50:6a:ca:
88:6b:0a:da:87:1d:50:97:12:3d:fc:42:53:66:0a:
20:60:fe:e3:db:1f:46:f1:66:e5:5c:ca:62:5b:33:
f0:fb:fc:3a:86:dd:1c:4a:94:a2:5f:43:ea:4d:8e:
2e:d2:f3:53:6a:3f:b1:d2:59:e6:5f:06:9c:d3:2a:
21:ba:b7:1a:90:28:68:61:7f:e1:aa:f2:8d:92:51:
cb:19:f1:86:f9:10:06:bc:58:1d:aa:b5:82:66:62:
22:1a:74:00:2d:13:68:dd:a0:9e:c6:12:e0:10:82:
15:eb:df:90:88:dd:05:6d:47:c9:70:7d:e3:4c:ea:
a2:35:12:5d:87:91:aa:89:fd:87:7b:10:bd:86:fa:
43:66:70:fb:ee:c0:72:b7:b8:ee:48:e8:e7:6d:a5:
c6:1e:aa:5f:b5:3b:b0:20:ed:7e:0b:6d:25:43:83:
80:ce:be:d8:12:80:ad:25:92:1b:d1:60:ef:af:c1:
71:5d:a3:02:ed:64:83:7e:8d:99:ab:1d:0a:97:96:
a0:c4:91:4e:88:06:62:74:f5:ef:8d:b8:2e:b0:8e:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:83:BB:8E:17:0A:44:FA:D7:88:10:43:63:E5:36:4F:E4:9A:7C
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d0:c3:3f:8a:11:f7:69:df:6b:eb:f2:b6:56:de:cd:87:3b:
c7:8c:99:13:2b:97:5c:1c:c1:b4:b7:2a:92:cc:31:40:dd:0b:
88:7c:08:90:02:77:5e:8b:4a:5c:8c:f5:66:2c:90:32:cc:f4:
53:0e:fe:67:13:50:71:b1:3e:bd:0a:4d:d8:3e:45:64:d2:67:
1b:c5:c3:8b:6c:94:b5:79:23:4f:d8:24:99:13:44:2d:2a:23:
e1:af:85:8e:3d:14:95:89:f3:92:d9:c9:84:a8:f2:a5:9d:06:
76:b4:ac:8c:a9:db:9d:f5:03:06:a9:63:83:18:bd:75:4f:4e:
47:64:4c:05:53:ac:58:08:2f:81:e4:ee:aa:1b:7b:b8:d1:f9:
48:64:1f:ef:82:f2:88:80:b7:f2:9b:d3:40:59:05:2b:e3:b8:
11:8c:c5:98:1d:0e:9b:af:5f:13:cf:af:db:46:b1:a1:b2:4f:
d1:c7:8e:8f:38:fb:bc:a1:d9:fd:83:a8:72:0a:4f:28:80:b5:
bd:4e:18:44:4d:8f:b9:41:f7:10:0c:b9:35:ba:26:2c:2f:6b:
73:9a:44:2d:bc:48:33:47:46:2f:6d:e6:b1:22:b9:70:e0:bd:
57:b9:17:31:80:bf:6f:16:24:e3:7e:cc:cd:5b:ae:c0:9f:e6:
8c:6b:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:38 2026 by rpki-client